A leaked letter is battering DeepMind’s arguments that it stayed within health data privacy laws